23691 matches found
CVE-2025-66416
The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol MCP. Prior to version 1.23.0, tThe Model Context Protocol MCP Python SDK does not enable DNS rebinding protection by default for HTTP-based servers. When an HTTP-based MCP server is run on localhost...
CVE-2025-59699
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 patched in 13.6.12 LTS and 13.9.0 STS, allow a physically proximate attacker to escalate privileges by booting from a USB device with a valid root filesystem. This occurs because of insecure default settings in the...
CVE-2025-66311
creationtimestamp| type| source ---|---|--- 2025-12-01 16:23:58+00:00| published-proof-of-concept| https://github.com/getgrav/grav/security/advisories/GHSA-mpjj-4688-3fxg...
CVE-2024-49572
creationtimestamp| type| source ---|---|--- 2025-12-01 15:30:22+00:00| seen| https://infosec.place/objects/c22ffb7b-d370-4185-b12a-8e92088603d6...
CVE-2025-64715
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...
Important: Red Hat Security Advisory: expat security update
An update for expat is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
CVE-2025-65960
creationtimestamp| type| source ---|---|--- 2025-11-25 22:02:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6idrrcqyg2a...
CVE-2025-12969
creationtimestamp| type| source ---|---|--- 2025-11-25 12:05:31+00:00| seen| https://gist.github.com/Darkcrai86/9c78936ffd5178a4049061473f0a3a90 2026-07-26 02:00:28+00:00| seen| https://t.me/EchelonEyes/4184 2026-07-27 00:00:09+00:00| seen| https://t.me/EchelonEyes/4184 2026-08-19 21:00:07+00:00|...
CVE-2025-13084
creationtimestamp| type| source ---|---|--- 2025-11-25 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-329-04 2025-11-26 21:08:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6kr7cngi32x...
Linux Distros Unpatched Vulnerability : CVE-2025-11702
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in EE affecting all versions from 17.1 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an...
EUVD-2025-198592
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
EUVD-2025-198559
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CGA-6CHW-942M-4G4Q
Bulletin has no description...
CVE-2025-65109 Minder does not sandbox http.send in Rego programs
Minder is an open source software supply chain security platform. In Minder Helm version 0.20241106.3386+ref.2507dbf and Minder Go versions from 0.0.72 to 0.0.83, Minder users may fetch content in the context of the Minder server, which may include URLs which the user would not normally have acce...
CVE-2025-13499
creationtimestamp| type| source ---|---|--- 2025-11-21 07:41:20+00:00| seen| https://gist.github.com/Darkcrai86/e6e153f125584e98e01ccf6a2b27bf92...
Security update for openexr (moderate)
openSUSE security update: security update for openexr ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025-20056-1 Rating: moderate References: bsc1253233 Cross-References: CVE-2025-64181 CVSS scores: CVE-2025-64181 SUSE : 4...
CVE-2025-13423
creationtimestamp| type| source ---|---|--- 2025-11-20 00:21:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5ziqtyps32n...
CVE-2025-65030 Rallly Improper Authorization in Comment Deletion Endpoint Allows Unauthorized Comment Removal
Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an authorization flaw in the comment deletion API allows any authenticated user to delete comments belonging to other users, including poll owners and administrators. The endpoint relies solely on the comment ID f...
CVE-2025-11446
Insertion of Sensitive Information into Log File vulnerability in upKeeper Solutions upKeeper Manager allows Use of Known Domain Credentials.This issue affects upKeeper Manager: from 5.2.0 before 5.2.12...